CVE-2017-7345

MEDIUM

5.3

CVSS Severity Score

EPSS Score0.1360%

EPSS Percentile22.29th

Published2017年4月10日

Last Modified2026年5月13日

Vulnerability Description

NetApp OnCommand Performance Manager and OnCommand Unified Manager for Clustered Data ONTAP before 7.1P1 improperly bind the Java Management Extension Remote Method Invocation (aka JMX RMI) service to the network, which allows remote attackers to obtain sensitive information via unspecified vectors.

Affected Platforms (CPE)

📦

Netapp

Clustered Data Ontap

<= 7.1

References & Advisories

🔗 http://www.securityfocus.com/bid/97537

🔗 https://kb.netapp.com/support/s/article/NTAP-20170331-0002